Architecture for supporting secure communication network setup in a wireless local area network (WLAN)

• US 20060041750A1
• Filed: 08/18/2005
• Published: 02/23/2006
• Est. Priority Date: 08/18/2004
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Thawani, Manoj, Carter, Edward, Deb, Manas
• Granted Patent: US 8,589,687 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04W 12/037 of the control plane, e.g. signalling traffic

Abstract

In a communication network, an architecture for supporting secure communication network setup in a wireless local area network (WLAN) is provided. The architecture may be utilized in a configurator station or in a client station for establishing a secure communication setup between the client station and the corresponding WLAN. The architecture may comprise an input interface that may be configured by a user to interface with the user'"'"'s hardware or software configuration buttons. The architecture may also comprise a finite state machine (FSM), a packet processor, and a Diffie-Hellman (DH) generator. The input interface, the FSM, the packet processor, and the DH generator may be associated with the secure communication setup process. The architecture may also comprise interfaces to communicate with a wireless driver and/or an Ethernet driver, and interfaces to communicate with persistent storage, such as non-volatile ready access memory (NVRAM).

Claims

1. A method for enabling communication of information in a secure communication system, the method comprising:

generating at least one encrypted configuration message within a configurator timing window when at least one configuration start signal is asserted; and

transferring said generated at least one encrypted configuration message to a client station to enable secure communication between a configurator station and said client station.

2. The method according to claim 1, further comprising generating at least one control signal in a finite state machine when said at least one configuration start signal has been asserted.

3. The method according to claim 1, further comprising generating by a packet processor:

at least one beacon message for establishing a secure wireless communication between said configurator station and said client station; and

said at least one encrypted configuration message.

4. The method according to claim 3, further comprising transferring said generated at least one beacon message to a network driver for broadcasting.

5. The method according to claim 1, further comprising receiving a hello message from said client station in a packet processor.

6. The method according to claim 1, further comprising receiving a random number in a Diffie-Hellman (DH) generator.

7. The method according to claim 6, further comprising generating a first key in said DH generator based on said received random number.

8. The method according to claim 7, further comprising generating a private key in said DH generator based on said first key and a second key received from said client station.

9. The method according to claim 8, further comprising generating said at least one encrypted configuration message based on said generated private key.

10. The method according to claim 1, further comprising retrieving said configuration information from a persistent storage device via a finite state machine.

11. A machine-readable storage having stored thereon, a computer program having at least one code for enabling communication of information in a secure communication system, the at least one code section being executable by a machine for causing the machine to perform steps comprising:

generating at least one encrypted configuration message within a configurator timing window when at least one configuration start signal is asserted; and

transferring said generated at least one encrypted configuration message to a client station to enable secure communication between a configurator station and said client station.

12. The machine-readable storage according to claim 11, further comprising code for generating at least one control signal in a finite state machine when said at least one configuration start signal has been asserted.

13. The machine-readable storage according to claim 11, further comprising code for generating by a packet processor:

at least one beacon message in a packet processor for establishing secure wireless communication between said configurator station and said client station; and

said at least one encrypted configuration message.

14. The machine-readable storage according to claim 13, further comprising code for transferring said generated at least one beacon message to a network driver for broadcasting.

15. The machine-readable storage according to claim 11, further comprising code for receiving a hello message from said client station in a packet processor.

16. The machine-readable storage according to claim 11, further comprising code for receiving a random number in a Diffie-Hellman (DH) generator.

17. The machine-readable storage according to claim 16, further comprising code for generating a first key in said DH generator based on said received random number.

18. The machine-readable storage according to claim 17, further comprising code for generating a private key in said DH generator based on said first key and a second key received from said client station.

19. The machine-readable storage according to claim 18, further comprising code for generating said at least one encrypted configuration message based on said generated private key.

20. The machine-readable storage according to claim 11, further comprising code for retrieving said configuration information from a persistent storage device via a finite state machine.

21. A system for enabling communication of information in a secure communication system, the system comprising:

a configurator station that generates at least one encrypted configuration message in a packet processor within a configurator timing window when at least one configuration start signal is asserted; and

said configurator station transfers said generated at least one encrypted configuration message to a client station to enable secure communication between said configurator station and said client station.

22. The system according to claim 21, wherein said configurator station generates at least one control signal in a finite state machine when said at least one configuration start signal has been asserted.

23. The system according to claim 21, wherein said configurator station generates at least one beacon message in said packet processor for establishing a secure wireless communication between said configurator station and said client station.

24. The system according to claim 23, wherein said configurator station transfers said generated at least one beacon message to a network driver for broadcasting.

25. The system according to claim 21, wherein said configurator station receives a hello message from said client station in said packet processor.

26. The system according to claim 21, wherein said configurator station generates a random number.

27. The system according to claim 26, wherein said configurator station generates a first key in a Diffie-Hellman (DH) generator based on said generated random number.

28. The system according to claim 27, wherein said configurator station generates a private key in said DH generator based on said first key and a second key received from said client station.

29. The system according to claim 28, wherein said configurator station generates said at least one encrypted configuration message based on said generated private key.

30. The system according to claim 21, wherein said configurator station retrieves said configuration information from a persistent storage device via a finite state machine.